Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation · Policy appendix

Devices and removable media

Every setting of the “Devices and removable media” package with its effect, value and recommending sources.

since 0.9.8.11

Purpose

This page lists every setting of the “Devices and removable media” package: what it does, which value Setup Foundry sets and who recommends it. It is generated from the catalog and never edited by hand.

9 settings.

Notes

Set the default behavior for AutoRun

This policy controls how Windows handles AutoRun commands. These commands are usually stored in an autorun.inf file on the media and can launch an installer or another application.

Deny write access to removable drives not protected by BitLocker

This computer policy makes write access to a removable data drive dependent on the drive's BitLocker protection status.

Limits print driver installation to Administrators

This REG_DWORD value controls whether non-administrators can install or update print drivers through Point and Print.

Prevent installation of devices using drivers that match these device setup classes

This computer policy prevents Windows from installing or updating driver packages whose device setup class GUID appears in the deny list. A device setup class groups devices that Windows installs and configures in a similar manner. The restriction can therefore cover an entire class of devices rather than one model or individual device instance.

Prevent installation of devices using drivers that match these device setup classes

This computer policy prevents Windows from installing or updating driver packages whose device setup class GUID appears in the deny list. A device setup class groups devices that Windows installs and configures in a similar manner. The restriction can therefore cover an entire class of devices rather than one model or individual device instance.

Prevent installation of devices using drivers that match these device setup classes

This computer policy prevents Windows from installing or updating driver packages whose device setup class GUID appears in the deny list. A device setup class groups devices that Windows installs and configures in a similar manner. The restriction can therefore cover an entire class of devices rather than one model or individual device instance.

Manage processing of Queue-specific files

This registry value controls which queue-specific files Windows processes when installing a print queue or a connection to a shared printer. A vendor-supplied installation component can associate such files with a particular queue. Clients connecting to the print server download the files that the policy permits.

Configure Redirection Guard

This setting controls Redirection Guard for the Windows print spooler. The mitigation prevents spooler file operations from being redirected to other paths through untrusted file-system redirections.

Point and Print Restrictions

This computer policy controls Point and Print connections to shared network printers that use non-package-aware print drivers. It can restrict the print servers from which driver components may be obtained and determine which security prompts appear when a driver is installed for a new connection or updated for an existing connection.

See also